Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: qWk3nv56bcj6fJiJ49jRqKQZwRC/0XYVqcNnfsONF6w=
Subject key identifier: DB:50:C3:02:59:C0:35:E1:20:59:4C:90:27:2E:21:CA:10:67:7B:0D
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 01A161C4C0E8B0199A821E477B1C75E011CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 1AB6
Signing time: Thu 22 Oct 2026 04:00:46 +0000
Manifest this update: Thu 22 Oct 2026 04:00:46 +0000
Manifest next update: Fri 23 Oct 2026 04:00:46 +0000
Files and hashes: 1: BEwSGx2LrGrF0sGwEj968AwEhBQ.roa (hash: FOuyYaW0tTl+dteUWOtoA2lUPrG6Wb17DxcFxBecsSA=)
2: O1kpwtflKFENDMxtFw4AMwXy_Eg.roa (hash: bFGH8x7w1VMHVR7CRYJvYNDIa0FPd2nWUvLigwhxhc4=)
3: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (hash: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: 5EMaOMMYHmPIA7WOS2EuX/dbzGGx0H/NFXTCytiXFnE=)
5: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (hash: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:c4:c0:e8:b0:19:9a:82:1e:47:7b:1c:75:e0:11:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Oct 22 04:00:46 2026 GMT
Not After : Oct 23 04:00:46 2026 GMT
Subject: CN=db50c30259c035e120594c90272e21ca10677b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:26:ac:46:26:a7:92:50:66:a5:fb:bf:24:
1f:e4:38:0e:e3:d4:11:01:9f:45:2c:01:44:ff:a6:
8e:ee:46:e8:ee:5a:d0:7f:27:94:04:66:f7:7d:18:
08:88:f6:9e:28:47:fa:ab:54:fd:6d:69:f5:2f:71:
4b:35:65:dc:68:51:6c:98:b0:51:04:71:1c:6c:5b:
48:06:bc:a3:a9:a5:c9:aa:f5:ec:b2:08:c3:a9:cc:
f0:27:9c:eb:0d:ae:31:71:6c:35:57:a3:d9:32:fd:
96:51:d0:ae:64:24:0a:56:d4:cb:50:80:99:6a:a0:
db:80:cc:f8:d0:ba:06:88:26:7a:3c:f9:ff:88:77:
af:1d:ee:fa:73:bd:8a:7d:1f:e5:83:fc:6d:64:9b:
2a:ee:55:ee:96:78:e7:2e:ad:83:b5:2f:55:6f:f4:
d3:62:a1:49:0f:9b:a5:50:dd:a6:a2:2a:c6:6b:55:
01:66:ab:8e:36:72:00:e7:f6:76:e3:fc:cb:4b:1c:
ff:ca:3c:c3:96:79:28:16:6f:a9:24:a6:90:1c:8e:
58:fe:f6:8e:58:81:17:29:f9:fd:49:16:6c:e5:87:
83:be:1b:2f:aa:8a:8d:1c:cf:5f:ac:bc:c3:51:7d:
56:7f:a9:25:d1:8c:da:d8:27:0b:00:62:fb:e0:9b:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:50:C3:02:59:C0:35:E1:20:59:4C:90:27:2E:21:CA:10:67:7B:0D
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7b:31:83:46:54:b8:88:6f:c5:4c:9a:67:da:87:52:76:93:
4b:b5:54:d0:f4:f7:b2:14:3f:13:9e:14:67:03:d8:01:0e:cb:
d5:92:d9:d2:18:bb:50:29:a2:cb:e6:67:fa:11:b7:2d:89:e6:
09:b8:9b:fe:9d:cb:ba:b9:22:2b:9b:51:53:b2:0a:fa:03:e7:
67:c7:98:df:85:84:ab:83:3d:d6:2b:a2:06:a3:7e:1f:09:7b:
5f:2b:30:b8:d9:4a:71:79:80:67:df:91:3a:58:08:1f:a6:6c:
ac:13:d7:b9:86:3a:a0:d9:37:58:52:2d:52:96:02:21:64:d1:
52:96:ff:92:6c:90:b5:41:8d:3b:06:7b:52:de:f6:75:4c:8d:
9b:9d:3d:de:b4:49:18:fb:71:15:91:c0:3f:84:95:b0:03:21:
ff:b0:88:ac:5a:5e:44:4a:2a:6c:3e:e9:0a:b8:df:cd:e9:66:
c7:16:ee:b5:bb:2b:a7:63:2b:1c:55:c8:95:1b:d6:4f:fa:e4:
1f:ae:af:fc:5a:78:24:27:20:14:01:97:ff:cc:ca:f4:77:f2:
1c:42:1a:db:9e:2f:7f:5b:5c:9b:c1:3c:b0:d7:c9:bb:92:62:
05:b2:02:30:7e:3e:1f:97:87:9b:23:4b:20:48:4a:3b:2a:7a:
73:01:3a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:56:44 2026 by rpki-client